NEVER ask for a user's password. IT must never know any user's password.
If you need to log in to their account because you need to set up their computer, create a temporary password, call the user and give the temporary password to them, then reset the password in local AD.
Set up the computer, and once the user receives the new computer, have them change their password.